Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier: wKd8bT3kP8dpeGqU3Nayg+W9vRIjCZwPT/ehXKirTR8=
Subject key identifier: FC:D6:A8:8C:C0:96:AD:A2:D1:52:56:59:28:82:47:C7:1F:66:6D:06
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 019A7225945A740FC3308838A67BE1E41E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number: 142E
Signing time: Tue 11 Nov 2025 09:00:56 +0000
Manifest this update: Tue 11 Nov 2025 09:00:56 +0000
Manifest next update: Wed 12 Nov 2025 09:00:56 +0000
Files and hashes: 1: Mb4j7pTwnHdFis5YhC0cWwhGfvs.roa (hash: kej8GZGhXkuRFLiOac4gIMVqJKtq/1UUpjpCTSVbu1g=)
2: hdN3TWiGF-v4lVfB-_MZbJp6BC0.roa (hash: FBzq8JkLasFx9OYifFuQNiKO30TthScuWNWKtgQWVSE=)
3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: EKSgko9KP+8ZDZDbqHxMfTAxUpDp8vYiL2Iq6Bs+6qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:94:5a:74:0f:c3:30:88:38:a6:7b:e1:e4:1e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Nov 11 09:00:56 2025 GMT
Not After : Nov 12 09:00:56 2025 GMT
Subject: CN=fcd6a88cc096ada2d1525659288247c71f666d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:4d:f2:e7:e5:a5:b3:9e:eb:ac:28:e2:58:
84:77:c1:dd:2d:f0:79:01:ac:09:69:4a:2e:36:34:
90:47:d5:15:54:e9:84:63:2f:b4:87:c3:95:9d:89:
e2:33:4c:b2:9d:8a:34:fa:3b:71:32:cc:1f:12:b6:
93:14:77:f8:75:10:84:57:e3:83:39:8a:1d:07:53:
a8:61:e7:fe:0f:ce:46:90:7b:19:3b:6f:5c:f0:dc:
4e:fd:f9:12:b2:b0:38:44:d6:a3:6e:65:c8:5a:f6:
6d:02:0b:c1:e3:4a:da:7c:45:c0:19:51:c5:eb:e5:
ac:46:28:71:4e:c2:b4:ce:fc:bf:87:63:77:59:51:
20:c4:11:a0:28:e6:45:a4:48:fc:ef:e3:87:cf:6a:
e7:56:6d:68:1f:47:b2:70:50:10:50:0e:c0:57:af:
9d:4d:69:ef:3c:e3:dd:da:80:28:8b:c7:75:70:39:
66:81:10:e2:d9:67:c6:ee:20:2d:f7:32:da:0c:5d:
7b:1e:bb:e1:2a:f6:be:41:37:5d:51:49:25:0b:02:
4d:d2:c0:b0:e6:4e:22:14:44:00:5a:ed:7e:c5:3d:
c2:9b:36:bf:57:8f:01:dc:6f:9d:6d:52:f3:68:b1:
51:90:1e:3f:d8:27:58:54:6b:bf:18:47:46:70:07:
49:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:A8:8C:C0:96:AD:A2:D1:52:56:59:28:82:47:C7:1F:66:6D:06
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:72:6e:31:73:5a:00:cc:a6:72:66:39:0a:3d:8d:9f:e3:3d:
4e:31:c0:ef:6a:f8:2a:68:67:d2:d3:88:75:9a:8b:f4:19:7b:
75:a9:54:10:1a:14:3d:fe:14:c8:61:09:14:d7:41:34:08:52:
d0:ef:d7:9a:5b:00:1d:19:80:f9:eb:13:66:61:e3:e0:96:19:
7f:66:1a:aa:24:93:b9:59:c1:8c:f1:31:16:79:66:11:3e:0d:
ba:54:f8:a4:72:30:79:dc:43:80:91:48:54:8d:53:30:99:37:
07:a5:4d:63:45:c7:92:77:1f:35:cf:2c:20:7a:8a:a1:3d:31:
8e:4c:cd:ab:57:77:60:94:df:07:d1:86:d2:4e:d6:78:b3:00:
20:d3:b3:de:b0:24:e2:6b:bc:e0:a8:69:13:6c:ce:ba:70:b2:
a4:bc:39:12:2c:a1:e2:cf:6c:c1:7c:f7:9e:75:75:1a:32:31:
94:fc:f8:fe:c7:4b:3d:44:bd:81:88:23:8a:6d:f2:24:bb:a3:
9a:ca:20:87:03:c2:e0:3e:d9:3c:47:6c:15:01:f7:2d:c9:9a:
39:64:86:07:f3:ec:58:30:27:64:04:59:25:a5:72:60:ae:45:
f6:36:4e:14:03:c5:b7:b7:b7:98:9e:db:f3:42:a3:1f:96:39:
f5:b2:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:47 2025 by rpki-client